General

  • Target

    09390e55015461396be69df279e65afe_JaffaCakes118

  • Size

    15.6MB

  • Sample

    240430-g34g6aed25

  • MD5

    09390e55015461396be69df279e65afe

  • SHA1

    63c26eb6e52631e4b9963051626b4c380061313a

  • SHA256

    2aa40d12c8f27ba3bdbdc900f8887feb210046c359116d054c1210fedd577947

  • SHA512

    cff2b302758b4ae0f62864107fe5b3507ae67c770c5e5d73017be36dfbd257531b20b9991e90f6ea381ac5aa5e906b042c5d6fbf9fe88e62ab7fe0d25b835a6c

  • SSDEEP

    393216:TKrVAMwJvTLFJQZznZQzh/eOzHAnVqNnyror80K99H8Osq:0obpJgAwakU80K99H8O/

Malware Config

Targets

    • Target

      09390e55015461396be69df279e65afe_JaffaCakes118

    • Size

      15.6MB

    • MD5

      09390e55015461396be69df279e65afe

    • SHA1

      63c26eb6e52631e4b9963051626b4c380061313a

    • SHA256

      2aa40d12c8f27ba3bdbdc900f8887feb210046c359116d054c1210fedd577947

    • SHA512

      cff2b302758b4ae0f62864107fe5b3507ae67c770c5e5d73017be36dfbd257531b20b9991e90f6ea381ac5aa5e906b042c5d6fbf9fe88e62ab7fe0d25b835a6c

    • SSDEEP

      393216:TKrVAMwJvTLFJQZznZQzh/eOzHAnVqNnyror80K99H8Osq:0obpJgAwakU80K99H8O/

    Score
    7/10
    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Acquires the wake lock

    • Checks if the internet connection is available

    • Target

      7723box_pjz.apk

    • Size

      3.3MB

    • MD5

      2dbfa511a770cb9923d85b15a9841848

    • SHA1

      7618c9af34437781884bec561d12ed2a0781e56a

    • SHA256

      07d5827ef21744d399bf1888c198a3715235c887c0abc82cba3545b9864c3837

    • SHA512

      fa718fde2af8f491407c927550410eb5eb6a40dc4df144507bd63b285ab7e8b630db85d11da5572b5ecb5b88ed38cc1cdc0d2fa7007717c17ac67ac859ac24be

    • SSDEEP

      98304:V3XuuHwWUJrVwUOLuAXaK2Koz8sdw428SlZLx9pvY:hx0rVwUqqK5Iw42vTLx9VY

    • Checks CPU information

      Checks CPU information which indicate if the system is an emulator.

    • Queries information about the current Wi-Fi connection

      Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    • Queries the unique device ID (IMEI, MEID, IMSI)

    • Reads information about phone network operator.

MITRE ATT&CK Mobile v15

Tasks